CVE-2017-9270

In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.

Score

CVSS 3.0 9.1 Critical

Status

Modified - security@opentext.com

Published

2018-03-01

Last modified

2024-09-17

Weaknesses

CWE-20, CWE-22

Affected products

• Cryptctl (Opensuse)
• Cryptctl (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1041963
• https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00022.html
• https://www.suse.com/de-de/security/cve/CVE-2017-9270/